jamesesilvia / cs509 Goto Github PK

assigned to myself

We only check for a username and password on client login. There is not username or password required to do GET/POST to the server. We need to implement basic authentication and send our username and password in the header of the GET/POST request so third parties cannot steal information from our server.

Can either not allow this, or force a logoff after.

Checkboxes that are already selected in this panel are disabled when editing a report. They should be enabled and allowed to be toggled off. All other panels with checkboxes seem to be working correctly.

In the create report view, the user is allowed to progress with no DOB set for the abuser (the default of DD/MM/YYYY passes valid info checking). This is considered required information, and will cause the view report to skip this information when pulling the abuse report from the server.

If a user enters no ID when attempting to view a report, AREST returns to home screen without warning, which is a null access error. This will go unfixed, as it does not crash the system.